Location: United Kingdom
Brainlabs is the independent, founder-led agency building the future of media. We have over 1000 Brainlabbers based across the global, all united through the 12 principles laid out in our Culture Code. We're full-service, with people and AI agents working side by side, all aligned to one thing: maximizing our clients' revenue through a genuinely scientific approach to media. If you want to help play your part in achieving this for the world's biggest brands in an environment that will support and challenge you in equal measure, this is where you do it.
So, tell me about the company
Brainlabs is culture-first. You’ve probably heard other companies describe themselves as people, clients, or profit first – but we see people, clients and profit as the building blocks of our ecosystem. Culture powers all three and we know that when the ecosystem is balanced, we all win! That's why the culture we cultivate is a culture of winning together.
To learn more about what it’s like to be a Brainlabber, check out our
culture code.
What you do
Own day-to-day security operations: vulnerability management, connector and MCP approvals, threat model reviews and incident support
Run and extend our SecOps AI agents, which handle Mend triage, MCP assessment, documentation review and incident scribing
Make the security decisions the agents escalate, setting clear conditions rather than blanket blocks
Drive vulnerability remediation with our dev and platform teams, escalating when fixes stall
Keep security posture visible across GCP projects plus AWS and Azure, and partner with SEP2, our external MDR provider
Who you are
You have solid security operations experience, whether from security engineering, appsec or platform security
You know GCP properly: IAM, service accounts, logging and org policy. AWS and Azure familiarity helps
You can read code well enough to judge whether a SAST finding is real
You’re genuinely fluent with AI tooling and you build with it rather than around it
You write clearly, because most of what you produce is a decision someone else has to act on
You’re comfortable saying no with a reason and yes with conditions, and happy owning a function rather than working a queue
How you succeed
You have solid security operations experience, whether from security engineering, appsec or platform security
You know GCP properly: IAM, service accounts, logging and org policy. AWS and Azure familiarity helps
You can read code well enough to judge whether a SAST finding is real
You’re genuinely fluent with AI tooling and you build with it rather than around it
You write clearly, because most of what you produce is a decision someone else has to act on
You’re comfortable saying no with a reason and yes with conditions, and happy owning a function rather than working a queue
What happens next
We know searching for a job is tough and that you want to find the best career and employer for you. We also want to ensure that this position is the best fit for both you and us. Therefore, you will participate in a comprehensive interview process that includes skills interviews with our team. The goal of this process is to allow you to get to know us as we learn more about you.
Brainlabs actively seeks and encourages applications from candidates with diverse backgrounds and identities.
Thank you for your interest in Brainlabs! We look forward to getting to know you!
What happens next?
We know searching for a job is tough and that you want to find the best career and employer for you. We also want to ensure that this position is the best fit for both you and us. Therefore, you will participate in a comprehensive interview process that includes skills interviews with our team. The goal of this process is to allow you to get to know us as we learn more about you.
A note on our offices:
We pride ourselves in being a company with an office-centric culture and, for the majority of roles we expect people to be in commuting distance of the office and come in for around 3 days per week.
Brainlabs actively seeks and encourages applications from candidates with diverse backgrounds and identities. We are proud to be an equal opportunity workplace: we are committed to equal opportunity for all applicants and employees regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion, or belief, and marriage and civil partnerships. If you have a disability or special need that requires accommodation during the application process, please let us know!
For details regarding our data processing activities, please refer to our
Candidate Privacy Notice
Protect Yourself from Job Scams:
We've been made aware of fraudulent job offers circulating in Brainlabs' name. Your safety is our priority, so please stay vigilant. Brainlabs will never ask you to transfer money, pay for a job opportunity, or request sensitive information such as Social Security numbers, banking details, or passwords via email, WhatsApp, or unsecured channels. Our official hiring communications only come from verified email domains (@brainlabsdigital.com, @brainlabs.ai, @exverus.com, @jacknimble.com.au, @sparro.com.au) and trusted platforms including Greenhouse, Upwork, Yuno Juno, and Remote. If you receive a suspicious message claiming to be from Brainlabs, do not engage. Instead, forward it immediately to
security@brainlabsdigital.com
. We're committed to protecting our community and ensuring a safe candidate experience. Thank you for your vigilance.
Location: Toronto; San Francisco; London; New York; Montreal
Workplace: Remote
WHO ARE WE?
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!
As a Senior Security Engineer you will:
- Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
- Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments
- Integrate security into our applications throughout the software development lifecycle
- Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed
- Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing
- Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions
- Gather and analyze security metrics to address security issues with cross-team dependencies
- Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions
You may be a good fit if:
- 5+ years previous experience in Application/Product Security or Security Operations with a strong focus on security tool onboarding and optimization
- You have an understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security
- You are comfortable with ambiguity and are able to make informed decisions with little data
- You employ a flexible and constructive approach when solving problems
- You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available
- You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences
- You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls
- You’re a hands-on security engineer interested in automating controls
FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS:
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits:
Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.
HOW AND WHERE WE WORK:
- Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.
If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.
We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs.
We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.
Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.
Location: Salt Lake City, Utah, United States
About the Role
ICapital is looking for a hands-on Application Security practitioner to join a small, high-impact team building a modern AppSec program. This individual will work directly with the Head of AppSec and senior team members, executing secure design, API security, and developer enablement.
Responsibilities
Support threat modeling and design reviews across a broad and growing service portfolio.
Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.
Qualifications
Hands-on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work
Real understanding of attack patterns and exploitation techniques
Familiar with OWASP Top 10 in practice
API security experience with REST and GraphQL assessment
Able to build and maintain security automation in Python, tooling that scales AppSec capacity
Understanding of web application and API security
Able to operate with autonomy in an environment still building its processes
Relevant certifications, cloud-native environment experience and exposure to AI/LLM security are a plus
Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus
Benefits
The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).
We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.
For additional information on iCapital, please visit
https://www.icapitalnetwork.com/about-us
Twitter: @icapitalnetwork | LinkedIn:
https://www.linkedin.com/company/icapital-network-inc
| Awards Disclaimer:
https://www.icapitalnetwork.com/about-us/recognition/
iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
Location: London
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
THE ROLE
Checkout.com http://Checkout.com is scaling a multi-cloud environment at pace, and security architecture is central to how we do it safely.
As Senior Cloud Security Engineer, you'll work closely with Engineering, GRC, Technology Risk, and Security Operations to embed security into every design decision and to make sure we can see what's happening across the estate once it's live.
You'll help embed security within the design phase and ongoing operations of our multi-cloud posture, define guardrails and policy-as-code standards, and support the strengthening of our SIEM and detection capability. You'll take on the most complex and ambiguous cloud security challenges in the business, and hold engineers to best practices.
This isn't a tool-monitoring role. You're here to lead security-by-design, set best-practice standards, and raise the bar.
What You'll Be Doing
- Develop and enforce reference security architectures, patterns, and blueprints for secure cloud adoption across AWS, Azure, and GCP.
- Conduct security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.
- Partner with Engineering teams to embed security guardrails early in design, ensuring compliance and resilience without adding friction.
- Evaluate engineering and platform architecture proposals, identifying security gaps and seeing remediation through to completion.
- Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.
- Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes.
- Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate.
- Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision-making.
Skills and Experience We're Looking For
We're looking for someone with strong technical expertise and a genuine passion for security. Here's what we need:
- Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS).
- Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience and SME depth in at least one platform.
- Kubernetes (EKS/AKS/GKE), API security, and IaC security (e.g. Terraform, CloudFormation, ARM templates).
- Securing user and non-user access at scale, including Azure Policy and cloud-native IAM controls.
- Demonstrated ability to provide clear, security-focused guidance, combined with excellent communication and senior-stakeholder engagement skills, and experience mentoring other engineers.
Nice to Have
- CISSP, CCSP, or equivalent certifications.
- AZ-500, AWS Certified Security, Google Professional Cloud Security Engineer, or equivalent cloud security certification.
- Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect.
- Experience integrating ATT&CK Navigator into SOC workflows.
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: London
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
THE ROLE
You will be a hands-on operator at the heart of the Cyber Security team, helping to run, harden, and continuously improve the day-to-day machinery of security. Where the Detection & Threat Engineer defines what "good" looks like, you help make it real, turning standards, runbooks, and tooling into reliable, repeatable operational practice.
This is a delivery-focused role for an experienced practitioner. You will spend your time in the tooling, in the tickets, and in the detail: enhancing the platforms the team depends on, tightening procedures, and making sure findings, alerts, and remediation work actually get closed out rather than left to drift.
You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running.
WHAT YOU'LL BE RESPONSIBLE FOR
- Supporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenance
- Building and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatable
- Triaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineers
- Tracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure)
- Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation records
- Supporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigue
- Assisting with scripting and automation to remove manual toil from recurring operational tasks
- Producing clear operational reporting and metrics on findings, remediation progress, and tooling health
WHAT WE'RE LOOKING FOR
- 5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security role
- Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms
- Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles
- Comfort with scripting to support automation and tooling (e.g. Python, KQL)
- Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure
- Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS
- Familiarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CK
- A pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just logged
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations: Lisbon, Portugal
About the role
Do you love solving complex technical issues and interacting with people? Are you passionate about providing premium-level support to customers and are a standout colleague? Cloudflare is seeking an experienced Network Security Engineer to join our team and support our largest and most technically sophisticated customers in resolving technical problems, threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare products from Magic Transit Infrastructure Protection, Argo Smart Routing, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum and Rate Limiting to help customers.
Responsibilities
Communicate with customers via chat, email, and phone
Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
DDoS mitigation for OSI layers 3,4, & 7: advise customers on how to filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blocklisting, allowlisting, and rate limiting
Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation, when applicable
Work with Engineering and Product teams to improve the products and tools
Desirable Skills, Knowledge, and Experience:
Self-driven and capable of learning new technologies / systems / features with little guidance
Fundamental understanding how the Internet works (OSI Model)
Advanced understanding of modern internet protocols like TCP and UDP
Computer Networking fundamentals, experience with iptables and looking glass
Experience troubleshooting network connectivity issues, BGP routing, and GRE tunnels
Packet capture analysis
Experience in command line and tools, including curl, dig, traceroute, openssl, git
Experience troubleshooting DNS, SSL / TLS, HTTP
Experience in a web development and / or hosting environment such as installing and configuring web servers like Apache, Nginx, Caddy and IIS
Experience writing scripts in Bash, Python, JavaScript or other scripting language
Experience in working as part of a team in a customer-facing role
Bonus Points
You are fluent in German, Japanese, French, Spanish, Portuguese, or Mandarin
You have worked with PostgreSQL, MySQL, MS SQL, and other database servers
You are familiar with Cloudflare and are actively using our platform
Compensation
Compensation may be adjusted depending on work location.
For Lisbon based hires: Estimated annual salary of €
38,000-52,000.
Equity
This role is eligible to participate in Cloudflare’s equity plan.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Remote - US
About Backblaze
Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.
Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.
But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a highly analytical,
systems-oriented
Director of Security Operations
to drive the planning, forecasting, deployment, and optimization of hardware infrastructure across our global cloud storage platform.
Role Overview
The Director of Security Operations leads the organization's day-to-day cybersecurity operations across traditional and AI-enabled environments. Reporting to the CISO, the Director leads Security Operations while partnering closely with the Director of Security Architecture & Engineering.
This is a hands-on technical leadership role requiring experience implementing and operating security controls as well as leading teams, incidents, and security programs.
Key Responsibilities
Lead security monitoring, incident response, threat hunting, security analytics, vulnerability management, adversary emulation, identity security, and operational resilience.
Establish operational priorities, service objectives, metrics, playbooks, and processes based on organizational risk and business needs.
Serve as incident commander for significant cybersecurity events and ensure lessons learned drive improvements to controls and operations.
Drive responsible adoption of AI-assisted detection, investigation, vulnerability analysis, threat hunting, and response capabilities.
Ensure effective security monitoring and response for AI applications, autonomous agents, workloads, and non-human identities.
Use automation to reduce manual work and compress detection, analysis, containment, and remediation timelines.
Partner with Security Architecture & Engineering to ensure controls are effectively designed, implemented, operationalized, monitored, and validated.
Develop security talent and provide the CISO with clear reporting on incidents, exposure, operational performance, risk, and program maturity.
Qualifications
Experience leading Security Operations, Incident Response, Detection Engineering, Vulnerability Management, IAM, or related cybersecurity functions.
Demonstrated hands-on experience implementing and operating security controls across cloud, infrastructure, applications, identity, endpoints, and networks.
Strong technical understanding of security analytics, detection engineering, exposure management, adversary emulation, and identity security.
Experience leading significant cybersecurity incidents and cross-functional response activities.
Experience implementing security automation and AI-assisted operational capabilities.
Strong leadership, mentoring, communication, and executive presentation skills.
Experience in cloud-native or large-scale distributed environments and familiarity with modern cybersecurity and AI-risk frameworks is preferred.
Backblaze Perks:
Healthcare for family, including dental and vision
Competitive compensation and 401K
RSU grants for full-time employees
ESPP program
Flexible vacation policy
Maternity & paternity leave
MacBook Pro to use for work plus a generous stipend to personalize your workstation
Childcare bonus (human children only)
Fertility treatment and support
Learning & development program
Commuter benefits
Culture that supports a healthy work-life balance
To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below.
The base pay range for this position is $205,000 - $230,000
At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing.
We are proud to be an Equal Opportunity Employer.
To understand more about the data we collect and process as part of your application, please view our
Backblaze Employee Privacy Notice.
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
About the Role
We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership.
What You'll Do
- AI Agent Security Strategy & Technical Execution
- AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination.
- Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections.
- Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely.
- Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces.
- Identity, Delegation & Least Privilege: Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users—ensuring agents never exceed the delegated privileges of the end user or misuse API keys.
- Context & Memory Boundary Security: Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories across multi-tenant workloads.
- Risk Management & Cross-Functional Enablement
- Maintain the AI Security Source of Truth: Define, document, and maintain authoritative secure design patterns and SDKs for engineering teams building internal or customer-facing AI agent capabilities.
- Contribution to Risk Register: Identify, quantify, and document non-deterministic and agentic security risks (e.g., OWASP Top 10 for LLMs & AI Agents, MITRE ATLAS), ensuring they are accurately represented in the Cybersecurity Risk Register.
- Auditability & Observability: Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly to support incident response, forensics, and GRC requirements.
- Compliance & Sales Enablement: Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation (e.g., ISO 42001, NIST AI RMF, EU AI Act readiness) and support Sales on complex enterprise security inquiries regarding AI safety.
Required Skills & Experience
- 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks.
- Deep understanding of agentic architectures and protocols (e.g., Model Context. Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies).
- Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt
- Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination.
- Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS.
- Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails.
- Experience authoring, maintaining, and evangelizing technical security architecture documentation.
- Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders.
- Proven track record of contributing to an enterprise Cybersecurity Risk Register.
Bonus Qualifications
- Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: USA (Remote)
Workplace: Remote
Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.
Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.
We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.
We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us!
THE ROLE
You'll be Tempo's first dedicated product security engineer, standing up application and infrastructure security from the ground floor. You'll build real tooling, respond to real incidents, and work directly with engineering to secure systems that help onboard the largest enterprises onchain.
RESPONSIBILITIES
- Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers
- Identify and remediate security gaps across Tempo's production systems and development pipelines
- Lead incident response end-to-end: triage, containment, remediation, and post-mortems
- Partner with engineering on secure design reviews and operational security decisions
- Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured
- Improve supply-chain security across dependencies, build systems, and deployment artifacts
- Scale application-security coverage as Tempo's infrastructure and product surface grow
- Operate with autonomy, build what's needed without waiting for large-company support structures
QUALIFICATIONS
- 5–8 years of hands-on product or application security engineering experience
- Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure
- Hands-on coding ability: you build security tooling, automation, and detection, not just recommendations
- Deep incident-response experience including high-severity situations owned end-to-end
- Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations
- Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security
- Comfortable communicating technical security decisions to engineers with real depth and specificity
Location: Montréal
We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.
Job Overview
Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ERP Central Component (ECC), S/4HANA, SAP RISE, SAP Business Technology Platform (BTP), Identity Authentication Service (IAS), and Identity Provisioning Service (IPS).
We are bringing more SAP security responsibility in-house and need someone who can guide complex work with technical knowledge, collaboration, and sound judgment, helping keep access to our SAP systems well governed, compliant, and ready for our migration to SAP RISE. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. Candidates who meet many, but not all, of the qualifications are encouraged to apply.
Location and Work Arrangement
This role is based at our Montreal, Quebec, Canada office and follows a hybrid schedule designed to support in-person collaboration. Employees are expected to work onsite on Tuesdays, Wednesdays, and Thursdays, with the flexibility to work remotely or onsite on Mondays and Fridays.
What You'll Do
Build SAP security architecture, standards, access models, and role design practices.
Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls.
Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements.
Lead role cleanup, redesign, simplification, and Segregation of Duties (SoD) remediation.
Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance (GRC), covering connectors, workflows, risk rules, provisioning, access analysis, and reporting.
Strengthen access provisioning, access reviews, emergency and privileged access oversight.
Support Sarbanes-Oxley (SOX) and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation.
Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps.
Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners.
Provide technical mentorship without formal people-management responsibility.
What You'll Bring
At least 6 years of relevant experience, or equivalent demonstrated experience, in SAP security, access governance, role development, or related work.
Solid understanding of SAP ECC and S/4HANA authorization concepts.
Experience in configuring or supporting SAP GRC and SAP Identity Access Governance.
Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations.
Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews.
Experience assisting with SOX, IT General Controls, internal audit, or external audit activities.
Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners.
Professional proficiency in French and English is required for this role. English is necessary to communicate and collaborate regularly with colleagues and leaders based in the United States who primarily work in English.
What Sets You Apart
SAP security certification or related SAP certification.
Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure.
Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration.
Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls.
Experience in a global enterprise environment with complex business processes and audit needs.
Who We Are
We’re a team of creators, storytellers, and innovators united under the Hasbro family and home to beloved brands, AAA digital games studios and immersive experiences that spark imagination across generations. Together, we’re committed to a culture rooted in creativity, excellence, curiosity, and inclusion, and where every employee is empowered to think boldly, act with integrity, and spark joy for all.
Hasbro
About the Company – Hasbro
Wizards of the Coast
Who We Are – Wizards of the Coast
Equal Opportunity
Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status.
Accommodations
If you have a disability and need reasonable accommodation during the hiring process, please inform your recruiter anytime throughout the process.
Notice Regarding Hasbro’s use of AI in the Recruitment Process
We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements.
How it works: Talent Matching compares information from your resume and application responses with job-related criteria established and weighted by Hasbro’s recruiting and hiring teams. Depending on the role, these criteria may include relevant skills, work experience, prior job titles, and industry experience. The tool then assigns a match category to help organize applications for review.
Human oversight: Talent Matching supports — but does not replace — human review. It does not automatically advance or reject candidates or make employment decisions. Hasbro’s recruiters and hiring managers review applications and remain responsible for all hiring decisions.
Greenhouse has published the results of an independent bias audit of Talent Matching.
View the Greenhouse Talent Matching audit results
.
#StudiosWizards
Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:
Health & Wellness
Time Off to Recharge
Financial Well-being
Life & Family Support
Volunteer and Community Initiatives
Learning & Development
Exclusive Perks
Please review our
Applicant Privacy Notice
to learn how we collect, use, and protect your personal information in connection with the application process.
Location: London & San Francisco
Workplace: onsite
THE OPPORTUNITY
Apollo Research works with most frontier AI companies (OpenAI, Anthropic, Google, Meta, Thinking Machines and others) to test their models before deployment and collaborate on fundamental scheming research. Our coding agent security product, Watcher, is deployed in production and monitors billions of agent tokens per month across engineering teams at agent-building scale-ups and enterprises.
Security exists at Apollo to safeguard the trust our lab partners place in us and to enable that research. Our own team runs around 400 billion tokens a month through AI agents, which makes Apollo both a target and a testbed. We’re hiring Security Engineers to join the Infra & Security Team.
In this role, you will design, implement, and deploy the security controls that keep Apollo secure, and make the secure path the default path for everyone. You will build the security layer for a novel insider risk that didn't exist before.
RESPONSIBILITIES
Design, build, and operate Apollo's core security controls: identity and access management, infrastructure and cloud security, endpoint management, and incident response.
Build paved roads that make the secure path the default, easy path
Establish and advocate for security practices across Apollo, and build the organizational trust needed for people to adopt them, communicating security decisions and tradeoffs clearly along the way.
Evaluate vendors and tooling, make build-vs-buy calls on security infrastructure, and assess vendor security posture before adoption.
Lead major security projects end to end, from ideation through implementation and rollout.
Collaboratively define and shape the security roadmap and priorities.
KEY REQUIREMENTS
Must-haves
5+ years in security roles
in a hands-on technical capacity (not purely GRC/compliance). You'd need to be able to think structurally about threat modeling and failure modes. You need to be able to read code, understand infrastructure, and evaluate technical controls.
Engineering mindset.
You treat security as an engineering problem. You are capable of, and willing to, build custom solutions when the task demands it, rather than relying on 'glueing' together off-the-shelf tools. You prioritize automation and systems-level thinking to scale security, and you are comfortable leveraging AI to accelerate development.
Direct experience with application security, cloud security, or product security.
Ideally you’ve owned or significantly contributed to the security posture of an organisation that handles sensitive customer data.
Influence without authority.
You have a track record of building buy-in for security practices and being trusted by non-security people.
Startup pace.
You are excited about a fast-moving environment, comfortable with ambiguity and changing priorities, and willing to grind when it matters.
Nice-to-haves
Software engineering experience
We would be excited to have candidates who have the one or more of these specialisations:
Zero-trust architectures
Sandboxing
Detection engineering
GRC engineering
Incident response
Endpoint management (Kandji, Jamf, or similar)
Identity/access management
Explicitly not required
Deep AI/ML security or LLM-specific expertise
Formal AI safety research background.
We need security practitioners who can learn the AI safety context, not AI safety researchers who need to learn security.
We want to emphasize that people who feel they don’t fulfill all of these characteristics but think they would be a good fit for the position, nonetheless, are strongly encouraged to apply.
REPRESENTATIVE PROJECTS
Zero trust migration:
Design and deliver an incremental path from Apollo's current cloud architecture toward zero trust, including hands-on implementation and deployment reducing the blast radius if any single credential, device, or agent is compromised.
Agentic SOC:
Design and build an internal agentic SOC from scratch; automate triage and investigation of security alerts so detection coverage scales with Apollo's growing use of AI agents.
Sandbox hardening:
Review Apollo's sandboxing infrastructure; propose and implement changes that improve security while minimizing impact on researcher productivity.
Third-party access review:
Implement a lean, streamlined access review process for third-party software that people will actually use.
Incident response:
Lead an incident response effort end to end: containment, root cause, and the post-mortem that turns it into a durable fix.
Pentesting tooling:
Decide which agentic pentesting solution Apollo will use, and whether to build or buy.
BENEFITS
This role offers market competitive salary, equity, and competitive benefits.
Salary:
San Francisco
: $214,000 – $280,000;
London
: £144,000 – £189,000. We will be looking to meaningfully raise salaries soon.
Our engineers effectively have an unlimited token budget. If a better result costs more compute, use it.
Flexible work hours and schedule
Unlimited vacation
Unlimited sick leave
Up to 6 months of paid parental leave
Comprehensive health, dental and vision insurance
Retirement savings with competitive employer matching (e.g. 401(k) for US employees)
Lunch, dinner, and snacks are provided for all employees on workdays
Paid work trips, including staff retreats, business trips, and relevant conferences
A yearly $1,000 (USD) professional development budget
Relocation support and visa fees (if applicable)
LOGISTICS
Time Allocation:
Full-time
Location:
This is an in-person role working out of our London or San Francisco office. We offer flexible working hours and some wfh arrangements.
Visa sponsorship:
We sponsor visas in both the UK and US. Sponsorship isn't guaranteed for every role or candidate, but if we make you an offer, we'll work with you to find the right visa route.
ABOUT THE TEAM
The Infra and Security team is currently led by Rusheb Shah and consists of Glen Rodgers and Steven Lee. You will work closely with Security Researchers we’re hiring for as well as technical staff from the Scheming Research and Product team. You can find our full team here.
ABOUT APOLLO RESEARCH
The rapid rise in AI capabilities offers tremendous opportunities, but also presents significant risks. At Apollo Research, we're primarily concerned with risks from Loss of Control, i.e. risks coming from the model itself rather than e.g. humans misusing the AI. We're particularly concerned with deceptive alignment / scheming, a phenomenon where a model appears to be aligned but is, in fact, misaligned and capable of evading human oversight.
We work on the science of scheming, detection of scheming (e.g. building evaluations), and scheming mitigations (e.g. anti-scheming). We also work on control and monitoring research (see our scalable monitoring agenda). We work closely with many frontier AI companies, such as OpenAI, Anthropic, Google, Meta, Thinking Machines and others, e.g. to test their models and collaborate on the science of scheming. At Apollo, we aim for a culture that emphasizes truth-seeking, being goal-oriented, giving and receiving constructive feedback, and being friendly and helpful. If you're interested in more details about what it's like working at Apollo, you can find more information here.
We also build a coding agent security product called Watcher that secures agent deployments in companies. Our goal is to reduce the probability of catastrophic incidents by securing coding agents, learning about their real-world risks, and publishing our research on how to build these control systems most effectively.
Equality Statement: Apollo Research is an Equal Opportunity Employer. We value diversity and are committed to providing equal opportunities to all, regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, or sexual orientation.
HOW TO APPLY
Please complete the application form with your CV. The provision of a cover letter is neither required nor encouraged. Please also feel free to share links to relevant work samples.
About the interview process: Our multi-stage process includes a screening interview, a take-home test (approx. 2-3 hours), 3 technical interviews, and a final interview with Marius (CEO). There are no leetcode-style general coding interviews. You may use AI tools on the take-home; we judge the result the way we'd judge any contributor's work, so you are responsible for the quality of everything you submit. If you want to prepare, we suggest building simple monitors for coding agents and running them on your own Claude Code / Cursor / Codex / etc. traffic.
Your Privacy and Fairness in Our Recruitment Process: We are committed to protecting your data, ensuring fairness, and adhering to workplace fairness principles in our recruitment process. To enhance hiring efficiency, we use AI-powered tools to assist with tasks such as resume screening. These tools are designed and deployed in compliance with internationally recognized AI governance frameworks. Your personal data is handled securely and transparently. All resumes are screened by a human and final hiring decisions are made by our team. If you have questions about how your data is processed or wish to report concerns about fairness, please contact us at info@apolloresearch.ai.
Location: Israel
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
We are seeking an experienced Security Engineering Lead to join the Cyber Security organization, reporting to the Corporate Security Engineering Manager under the CISO.
This is a senior technical lead role focusing on engineering and execution without direct people management responsibilities. This role combines hands-on security engineering to deliver end-to-end protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them.
You will be responsible for
implementing, managing, integrating and maintaining security systems across the organization’s IT landscape.
The role requires deep technical proficiency in multiple platforms and tools, combined with the ability to collaborate with Security, IT, Engineering, Product, GRC and other business units to reduce risks and embed strong security practices.
Your responsibilities will include:
Engineer, deploy, and continuously tune systems such as Identity & Access, Threat Detection & Response, Cloud & Network Security.
Define, enforce and maintain security policies & configurations across endpoints, email, SaaS, network, and cloud platforms.
Design and implement solutions to gain continuous visibility into systems and processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments.
Monitor, triage, and investigate security alerts and risks, collaborating with Security, IT, Network teams on escalation and remediation.
Conduct risk assessments and identify gaps in security controls across systems, pipelines, and business processes.
Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to security and privacy.
Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems, and workflows.
Maintain documentation, runbooks, and guidelines for operations, security posture management, and security practices.
We expect you to have:
6+ years of experience in IT security, with a strong focus on System, Network, Information, Cyber. With at least 3 years in a Security Engineering role.
Proven hands-on engineering experience with enterprise security platforms - including policy authoring, tuning, incident workflow configuration, and platform administration.
Experience securing data across cloud environments and SaaS platforms, including shadow IT and unmanaged data stores.
Strong understanding of identity and access management and data access governance principles.
Experience working cross-functionally with Security, IT, Engineering, Product, and GRC teams.
Strong analytical mindset with the ability to communicate security risks clearly to technical and non-technical stakeholders.
Excellent written and verbal communication skills in English.
Proactive, detail-oriented, and ownership-driven.
Hand-on experience with multiple technologies such as: XDR (Extended Detection & Response), SWG (Secure Web Gateway), DLP (Data Leakage Prevention), Email Security, Network security (Firewalls, NAC, NDR), IGA (Identity Governance & Administration), CASB (Cloud Access Security Broker), PAM (Privileged Access Management), EPM (Endpoint Privilege Management), BAS (Breach & Attack Simulation), Vulnerability Scanners, SIEM (Security Information & Event Management), SOAR (Security Orchestration, Automation & Response), CTI (Cyber Threat Intelligence), Patch Management, TPRM (Third-Party Risk Management), EASM (External Attack Surface Management).
It will be an added bonus if you have:
Experience building or scaling a security program from the ground up in a growing organization.
Experience with cloud-native security services (AWS, Azure, Google).
Knowledge of privacy and regulatory frameworks (GDPR, ISO 27001, SOC 2).
Scripting or automation skills (Python, PowerShell).
Relevant certifications such as CISSP, CISM.
BSc in Computer Science, Information Security, or a related field.
Project & people management experience.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Remote - US
Who we are
At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to
hundreds of thousands of businesses
and empower millions of developers worldwide to craft personalized customer experiences.
Our dedication to
remote-first work
, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.
Hiring and how we work
We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!
Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.
See yourself at Twilio
Join the team as our next Staff Engineer, Enterprise Security
About the job
As a Staff Enterprise Security Engineer, you will be a technical leader within the EntSec team, responsible for the foundational security posture of our organization. You will serve as an SME on the technical strategy and engineering execution for securing the AI ecosystem in our Enterprise, moving beyond policy into building the foundational "decision infrastructure" and technical guardrails that allow the enterprise to innovate with AI at scale.
You will also guide strategic direction and collaboration across enterprise security domains. You will need a background in security engineering and the cross-functional influence necessary to solve ambiguous, large-scale problems. Leveraging expertise in security assessments, threat modeling, identity and access control principles, and data protection, you will architect and build preventative guardrails and mitigate new risks introduced by first and third-party AI agents in our Enterprise.
Responsibilities
Design and implement secure reference architectures for Enterprise AI platforms that secures every Twilion’s engagement with them, ensuring data integrity, regulatory compliance, and resilience against evolving AI threats.
Establish a definitive framework for AI vetting, driving the cultural and policy shifts needed to institutionalize this strategic mindset across the organization.
Collaborate with cross functional partners to develop and set the long term roadmap for agentic AI identity and posture management, ensuring cohesive strategies for reducing risk from agentic AI use.
Maintain and improve our enterprise security posture through high-quality code (Python, Go, or similar) and infrastructure management via IAC.
Act as a technical mentor to junior engineers and a strategic advisor to leadership on the evolving AI landscape.
Qualifications:
Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply.
Required:
7+ years of experience in security engineering or infrastructure security
2+ years of experience leading teams in a technical capacity/staff engineering capacity at an enterprise.
Expertise in cloud security (AWS, GCP) and container security (Kubernetes).
Proven track record of designing and deploying complex security systems at scale.
Strong proficiency in programming languages such as Python, Go, or Java.
Desired:
Experience in building, deploying and reviewing automation for complex security workflows, including use of both AI-driven and traditional automation tools.
Excellent communication skills with the ability to explain complex AI security risks to non-technical stakeholders.
Location
This role will be remote, but is not eligible to be hired in San Francisco, CA, Oakland, CA, San Jose, CA, or the surrounding areas.
Travel
We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.
Compensation
*Please note the salary range information provided applies only to candidates residing in California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State due to local requirements. Compensation for candidates in other locations will be discussed during the hiring process. Please note that hiring for this role is not restricted to the locations listed above.
.
The estimated pay ranges for this role are as follows:
Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $155,520 - $194,400.
Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $164.640 - $205,800.
Based in the San Francisco Bay area, California: $182,960 - $228,700.
This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.
The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.
Applications for this role are intended to be accepted until December 21, 2026, but may change based on business needs.
Twilio thinks big. Do you?
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call
Twilio Magic
. Additionally, we empower employees to build
positive change in their communities
by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for,
please consider other open positions.
.
Stay alert to recruitment fraud
We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @
twilio.com
email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.
.
Twilio is proud to be an equal opportunity employer.
We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Location: Lisbon, Portugal
Joom Group is an international tech-centric group of e-commerce companies founded in 2016 in Latvia. We are here to transform the largest industry in the world, global trade, making it more transparent, efficient, and technology-driven.
Today, Joom Group brings together the following businesses: Joom, a platform for shopping from all over the world; JoomPro, the first end-to-end cross-border B2B marketplace, with successful operations in Brazil and plans to expand to other markets; JoomPulse, data platform that provides analytics and recommendations for marketplace sellers; and Onfy, a pharmaceutical marketplace in Germany. Joom Group’s offices are located in China, Brazil, Portugal, Latvia, and Germany, with headquarters in Lisbon, Portugal. We work as one international team, sharing knowledge and collaborating across countries, businesses, and products.
As we continue to grow and introduce new products and services, we become increasingly susceptible to security threats. We are currently seeking an
Application Security Engineer
for our infrastructure team to stay informed about current threats and ensure the security of our development and applications.
This role offers the opportunity to develop the application security direction from the ground up and achieve international certification.
We prioritize innovation over bureaucracy and legacy code and are always open to fresh ideas.
Responsibilities
Implement SSDLC with the development team
Analyze the security of the company's products
Assist teams in addressing vulnerabilities
Stay informed about current threats and develop code protections
Requirements
3+ years of experience in web/mobile application security
Experience in securing mobile and web applications
Experience in building secure development processes (SSDLC)
Experience with white box testing
Knowledge of *NIX systems and basic network protocols
Preferred
Experience in bug bounty programs
Relevant information security certifications (e.g., OSCP, CompTIA Security+)
CVE authorship
Proficiency in Go, Python, or Java
We offer
Compensation package: base salary and performance-based bonuses
Office-first: flexible hours with a possibility to work remotely 52 days per year, and 22 days of paid annual leave
Care & Wellbeing: health insurance (including dental care) for employees and their children, daily meal allowance, and 100% paid sick leave
AI-first approach: licenses and access to a wide range of AI tools
Team & Growth: collaboration with colleagues across Portugal, Brazil, Latvia and China, with opportunities for promotions, professional trainings, and English courses
Community & Engagement: annual team building activities, knowledge-sharing workshops, and a strong sense of team work
B
efore applying for the above position please review our Candidate Privacy Notice
here
. By responding to the vacancy, you acknowledge that you have read our Privacy notice.
Location: US Remote
Workplace: Remote
Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and teams across Europe and the US.
As AI continues to shape the way we live and work, Synthesia develops products to enhance visual communication and enterprise skill development, helping people work better and stay at the center of successful organizations.
Following our recent Series E funding round, where we raised $200 million, our valuation stands at $4 billion. Our total funding exceeds $530 million from premier investors including Accel, NVentures (Nvidia's VC arm), Kleiner Perkins, GV, and Evantic Capital, alongside the founders and operators of Stripe, Datadog, Miro, and Webflow.
Location: Remote (US East Coast/Central)
As our team and customer base grow, we need to make sure our security efforts scale accordingly. For that, we are looking to expand the Synthesia Infosec team by onboarding an additional Security Engineer (L6)! You will report to the Head of Security and work within the Security Operations team.
KEY RESPONSIBILITIES:
- Build and own deeply technical security improvements across our Cloud Infrastructure(s) and associated territory (AWS/GCP, Kubernetes, CI/CD), including shipping production changes yourself when needed.
- Design, implement, and iterate on detection and response capabilities (SIEM, EDR/MDR, cloud-native detections, CNAPP) with an engineer’s bias for automation, reliability, and measurable outcomes.
- Hunt, investigate, and respond to security alerts and suspicious activity end-to-end (triage → containment → eradication → recovery → learnings), including writing tooling and detection logic to prevent recurrence.
- Build internal security tooling and automations (IaC, scripts, integrations) that reduce toil and raise the security bar by default.
EXPERIENCE & QUALIFICATIONS:
- You’re a deeply technical security engineer with a builder/hacker mindset, able to go from idea → prototype → production and comfortable making changes directly in Cloud Infra / DevOps systems.
- You have 5+ years of hands-on security engineering experience, ideally in a cloud-first SaaS environment.
- Have worked in a fast-growing startup, scale-up and/or SaaS company
WE WOULD EXPECT YOU TO HAVE EXPERIENCE IN:
- Cloud security engineering in AWS and/or GCP, with the ability to implement improvements hands-on (IAM, networking, compute, storage, logging).
- Kubernetes security (cluster hardening, workload isolation, runtime security, policy controls) and container ecosystems.
- DevOps fundamentals: CI/CD security, secrets management, artifact integrity, and secure-by-default platform patterns.
- Incident response and investigation, including creating repeatable playbooks and automating response where appropriate.
- Strong programming/scripting ability (Python or similar) plus comfort with infrastructure-as-code (e.g., Terraform) and automation.
- Serious agent coding - ideally you’re on the bleeding edge in the space.
- Endpoint security tooling, such as CrowdStrike
Bonus points for:
- Hands on experience with any/all of: Hunters, Wiz, Falcon, Tracebit, Torii, Okta, Google Workspace, StrongDM, Github, StepSecurity, Dope Security
- Any relevant Information Security certification, e.g AWS Certified Security, GIAC GWEB, OSCP, or CSSLP.
THE GOOD STUFF..
In addition to being a part of a great team, working in a fun and innovative environment, we offer:
- A competitive salary + stock options in our fast-growing Series E startup
- Remote-friendly environment
- 100% Medical, Dental & Vision
- 401k Plan
- Paid parental leave
- 25 days of annual leave + Public holidays + paid sick leave
- Fun culture with regular socials
- A generous referral scheme
- A brand new computer + monitor
- Budget and support for conference travel, community events, and content production
Location: United States
Workplace: Remote
The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.
What you will do:
- Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
- Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
- Apply a threat modeling centric approach to incident detection and response
- Maintain security logging platform
- Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
- Handle information security events and incidents across the ClickHouse products and services
What you bring along:
- Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
- Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
- Excellent written and verbal communication skills
- Experience securing large-scale customer-facing cloud infrastructures
- Significant development and automation experience; preference for Golang and Python
Bonus Points:
- BS, MS, or PhD in Computer Science or related field
- Previous contributions to open source projects
- Security or cloud related certifications (AWS, GCP, Azure)
PERKS
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new eligible team member who joins our company receives equity.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- A USD$500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
CULTURE - WE ALL SHAPE IT
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse.
EQUAL OPPORTUNITY & PRIVACY
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.
Location: United States
Workplace: Remote
The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.
What you will do:
- Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
- Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
- Apply a threat modeling centric approach to incident detection and response
- Maintain security logging platform
- Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
- Handle information security events and incidents across the ClickHouse products and services
What you bring along:
- Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
- Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
- Excellent written and verbal communication skills
- Experience securing large-scale customer-facing cloud infrastructures
- Significant development and automation experience; preference for Golang and Python
Bonus Points:
- BS, MS, or PhD in Computer Science or related field
- Previous contributions to open source projects
- Security or cloud related certifications (AWS, GCP, Azure)
PERKS
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new eligible team member who joins our company receives equity.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- A USD$500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
CULTURE - WE ALL SHAPE IT
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse.
EQUAL OPPORTUNITY & PRIVACY
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.
УдалённоseniorToronto; San Francisco; London; New York; Montreal; We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities
Salt Lake City, Utah, United States
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ГибридСША; 💹 401(k) Program with a 4% match (US Only); 🚗 Commuter Benefits (In-Office & US Only); We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds
УдалённоUSA (Remote)
Montréal
ОфисseniorLondon & San Francisco; Relocation support and visa fees (if applicable)
leadIsrael
УдалённоRemote - US; Compensation for candidates in other locations will be discussed during the hiring process